Security Bulletin: vulnerability addressed in IBM Big Replicate LiveData Migrator 3.4

Summary The libraries affected include Aircompressor. Dependency packages are being used by IBM Big Replicate LiveData Migrator. This bulletin describes the upgrades necessary to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-36114 DESCRIPTION: Aircompressor is a library with...

Security Bulletin: Multiple vulnerabilities addressed in IBM Big Replicate LiveData Migrator 3.4

Summary Multiple vulnerabilities addressed in IBM Big Replicate LiveData Migrator 3.4. The libraries affected include tomcat-embed-core-9.0.108.jar Dependency packages are being used by IBM Big Replicate LiveData Migrator. This bulletin describes the upgrades necessary to address the...

Malicious Package

Overview replicate-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-3718

Malicious code in replicate-js npm...

MAL-2026-427 Malicious code in replicate-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84c6cb090eb31f1b2c516b45419d7833bca83f5546d22444032d28a07d27f40 The package replicate-js was found to contain malicious code. Source: ghsa-malware 658bf1d6aa22bb672e5ae9724e34b94ee7ff73e7cd4381ff4a6a8c9c2d1267fa A...

Malicious code in replicate-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84c6cb090eb31f1b2c516b45419d7833bca83f5546d22444032d28a07d27f40 The package replicate-js was found to contain malicious code. Source: ghsa-malware 658bf1d6aa22bb672e5ae9724e34b94ee7ff73e7cd4381ff4a6a8c9c2d1267fa A...

MAL-2025-177157 Malicious code in nuyar-dad-rofdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255e9e57ad9f5163e39fc332a637a5da0ee62a913737e85932ee52445960a73e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171652 Malicious code in niamhbyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1d7fc31e45b15da92d34a58f1f096fa1c3789a404e0418fdcb38949180ea5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159992 Malicious code in manuffak-angabofi-guna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51800f4e3b73ffa501a0eefe18f62eb28c68d6426dabdde3031090d9aa15ab35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138615 Malicious code in coastal-magenta-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235590e89046dd3066abdb46bd9511d593bddd04b1569cfaba1c03bed17bfd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ac0277da6e009a47e66d387c6a8ea22169d57b7f2d7af03c020fd8860c342e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131277 Malicious code in wawan-soto86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906de89c42b175959796e89b119aed1a7ad5ad7bb98fa3de105b8ce1463bf246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122902 Malicious code in riana-nasi17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991b5dcd2fa228bdbe7cddbffa446544d000346e89ecf0140ae1b14075c25e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118135 Malicious code in xaver-kentang9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2c12f62b25c73e647d5149adf5df74079eff2cdad690ec7bc0d40e59176f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113246 Malicious code in cuddly_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3146815cd0f950a92017f412e125faee99a358cfc704f75f3fb02a72e84768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_sheep_azure-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b943913fc09e154f06a91c1e356c349630f5e3f9d456f1136f8e885690ada3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76676

Malicious code in healthyjunglefowlreplicateautomation npm...

EUVD-2025-74944

Malicious code in bettermitereplicateautomation npm...

EUVD-2025-76769

Malicious code in geographicalapereplicateautomation npm...

EUVD-2025-77067

Malicious code in divinewildcatreplicateautomation npm...